Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/e9b50c2b-3919-3522-8f37-d9b9df23aff8.roa
File:                     e9b50c2b-3919-3522-8f37-d9b9df23aff8.roa (raw, json)
Hash identifier:          3HemYXQXyBFtZR2UfKSS7JPU5tDzUEORHN2vW6e5/34=
Subject key identifier:   A3:79:00:48:BA:EE:F0:84:2A:B5:77:15:95:3B:24:FF:26:AC:8C:C4
Certificate issuer:       /CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
Certificate serial:       010D0C9F4328584A600E906CA99BC54456DA1AC0
Authority key identifier: 8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/e9b50c2b-3919-3522-8f37-d9b9df23aff8.roa
Signing time:             Tue 01 Jul 2025 15:27:43 +0000
ROA not before:           Tue 01 Jul 2025 15:27:43 +0000
ROA not after:            Mon 29 Sep 2025 15:27:43 +0000
asID:                     5065
IP address blocks:        192.190.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:60:0e:90:6c:a9:9b:c5:44:56:da:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
        Validity
            Not Before: Jul  1 15:27:43 2025 GMT
            Not After : Sep 29 15:27:43 2025 GMT
        Subject: CN=d2e41f78-69f4-44d3-a1c1-5ea92be76be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:e8:e5:f3:e3:f4:82:a0:d8:41:20:ad:39:
                    af:3d:88:e3:02:4d:f7:f1:d9:70:28:a2:41:19:a9:
                    8a:25:71:ef:df:8d:d3:68:9f:73:26:c9:4e:05:bd:
                    34:53:52:f7:67:72:eb:3e:ae:92:e5:b7:3e:7b:01:
                    2a:0a:dd:18:47:be:58:04:da:c2:ce:34:c9:d4:a1:
                    50:1a:63:11:df:17:99:73:79:28:ac:81:2f:8f:49:
                    e8:dd:63:77:0a:e4:58:c2:8b:36:07:6e:3a:76:7b:
                    2e:3b:5e:32:d6:90:71:89:91:d0:01:72:d7:73:f6:
                    31:c7:a3:7a:29:0a:5d:4e:15:47:fc:f6:5e:05:ef:
                    0e:fc:32:3a:12:86:7a:a5:9d:fe:eb:8e:37:12:d5:
                    61:c3:a6:7d:62:d8:08:5f:2d:05:ff:b9:91:42:13:
                    54:80:3b:2d:18:e5:cd:83:84:38:c4:bd:15:8d:a7:
                    82:56:08:0c:74:84:d9:a2:ef:5f:fd:fe:82:9f:e5:
                    c6:ba:61:e0:15:c6:82:87:41:ee:e7:30:ac:ba:fb:
                    f4:1d:97:15:0e:c3:1d:17:18:50:86:bc:aa:df:e0:
                    c8:65:a0:bd:1b:f9:a5:10:67:55:c7:6a:08:39:7f:
                    b1:f6:f8:9c:7c:59:11:a2:a6:e9:be:34:c0:7c:d2:
                    df:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:79:00:48:BA:EE:F0:84:2A:B5:77:15:95:3B:24:FF:26:AC:8C:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/e9b50c2b-3919-3522-8f37-d9b9df23aff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:a9:3b:d5:21:e6:6b:33:db:2d:7a:9d:53:90:ca:33:d4:
         58:bf:e2:a7:9b:97:93:11:ca:7e:93:1a:63:f3:17:02:85:7e:
         6b:01:5d:ff:9c:88:3d:f9:e0:c4:d9:ff:56:00:f4:1a:94:69:
         3c:21:01:f3:18:dc:1b:26:cf:b9:d1:dd:8e:82:68:b9:e3:5a:
         a9:9e:0f:4b:ab:89:4f:a7:48:32:1b:2c:68:7e:0d:c7:35:f8:
         bf:ba:b2:16:07:dd:52:4b:3b:aa:eb:29:48:ea:61:a0:1d:80:
         de:ee:7c:9a:ae:72:d9:cd:26:1a:42:29:12:23:5b:53:df:d7:
         78:e1:c3:14:cd:6c:4f:7d:f9:45:05:19:a5:8f:81:1d:fe:08:
         21:2c:c4:7d:63:50:06:d4:01:84:bc:ea:d7:c3:f1:01:f1:bd:
         30:dc:3e:4a:18:0f:3f:82:a7:cb:1d:4e:4e:8f:c7:68:0d:60:
         1d:e4:b3:07:aa:30:0f:38:d1:18:21:45:d6:65:bc:f8:08:15:
         72:17:f1:f3:17:f9:c0:66:45:8d:4c:fe:9a:2e:d4:ad:fb:c7:
         d1:f5:3a:db:c2:ae:e8:88:9a:24:d1:f7:20:f1:d7:50:96:51:
         47:0f:ee:0d:95:32:89:4e:16:f5:79:5c:7d:53:08:3b:8a:59:
         b3:df:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:17:22 2025 by rpki-client